The unofficial HackerOne disclosure Timeline

b'Valve' disclosed a bug submitted by b'njbooher'
b'ISteamAssets gives partners control over unrelated community market transactions'

23 May 2019 timeline

b'GitLab' disclosed a bug submitted by b'iframe'
b' The ability to pull out the domain and the mail part associated with the user account [gitter.im]'

22 May 2019 timeline

b'Shopify' disclosed a bug submitted by b'corb3nik'
b'H1514 [*.(my)shopify.com] - Viewing Password Protected Content'

22 May 2019 timeline

b'Starbucks' disclosed a bug submitted by b'wa1m3im'
b'Reflected XSS in https://www.starbucks.co.jp/store/search/'

22 May 2019 timeline

b'Starbucks' disclosed a bug submitted by b'0xpatrik'
b'Subdomain takeover of mydailydev.starbucks.com'

22 May 2019 timeline

b'Grammarly' disclosed a bug submitted by b'karimpwnz'
b"Employee's GitHub Token Found In Travis CI Build Logs"

22 May 2019 timeline

b'Revive Adserver' disclosed a bug submitted by b'paulos_'
b'Authentication Bypass by abusing Insecure crypto tokens in /lib/OA/Dal/PasswordRecovery.php:'

21 May 2019 timeline

b'Tor' disclosed a bug submitted by b'xiaoyinl'
b'Detecting Tor Browser UI Language'

21 May 2019 timeline

b'ok.ru' disclosed a bug submitted by b'linkks'
b'Cisco ASA Denial of Service & Path Traversal (CVE-2018-0296)'

20 May 2019 timeline

b'HackerOne' disclosed a bug submitted by b'flashdisk'
b'Race condition in claiming program credentials '

19 May 2019 timeline

b'HackerOne' disclosed a bug submitted by b'yaworsk'
b'API Last Request Date/Time Not Updating'

19 May 2019 timeline

b'ZEIT' disclosed a bug submitted by b'elmahdi'
b'CSRF On Connect Account With Github Lead To Account Takeover'

19 May 2019 timeline

b'HackerOne' disclosed a bug submitted by b'fixit'
b'Banned researcher gets email updates on a private program.'

18 May 2019 timeline

b'RATELIMITED' disclosed a bug submitted by b'daniel_v'
b'Unrestricted File Upload on https://auth.ratelimited.me'

18 May 2019 timeline

b'Zendesk' disclosed a bug submitted by b'trimatra-sec'
b'Blind XSS via Suspended Ticket Recovery'

17 May 2019 timeline

b'Twitter' disclosed a bug submitted by b'nyuszika7h'
b'Protected Tweets setting overridden by Android app'

17 May 2019 timeline

b'Mail.ru' disclosed a bug submitted by b'linkks'
b'benchmark metrics available at 5.61.239.154'

17 May 2019 timeline

b'Khan Academy' disclosed a bug submitted by b'tomoh'
b'Take over of accounts created using Google or Facebook'

17 May 2019 timeline

b'Khan Academy' disclosed a bug submitted by b'tomoh'
b'Account takeover by changing email'

17 May 2019 timeline

b'Twitter' disclosed a bug submitted by b'terjanq'
b'Twitter ID exposure via error-based side-channel attack'

16 May 2019 timeline

1 ... 436 437 438 439 440 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.